CVE-2025-21828: wifi: mac80211: don't flush non-uploaded STAs
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: don't flush non-uploaded STAs
If STA state is pre-moved to AUTHORIZED (such as in IBSS scenarios) and insertion fails, the station is freed. In this case, the driver never knew about the station, so trying to flush it is unexpected and may crash.
Check if the sta was uploaded to the driver before and fix this.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21828?
CVE-2025-21828 has been classified as a high-severity vulnerability affecting the Linux kernel.
How do I fix CVE-2025-21828?
To fix CVE-2025-21828, update your Linux kernel to the latest stable version that addresses this vulnerability.
What systems are affected by CVE-2025-21828?
CVE-2025-21828 affects various systems running the Linux kernel that utilize the mac80211 subsystem for wireless communication.
What is the nature of the vulnerability described in CVE-2025-21828?
CVE-2025-21828 involves the improper handling of station state transitions in mac80211, potentially leading to denial of service.
Is there a workaround for CVE-2025-21828?
There are no officially recommended workarounds for CVE-2025-21828; updating the kernel is the advised course of action.